[TriLUG] What could be going on with my nameserver?

Jon Carnes jonc at nc.rr.com
Tue Nov 1 18:04:04 EST 2005


You really shouldn't be using forwarders anymore.  And *don't* forward
your DNS requests to a crappy low powered non-caching DNS forwarding app
running on your Netgear router...

You should have a file called "root.hint". your server will use this to
populate itself with the current root Name servers. This lets your local
Name server do direct lookup's for DNS requests.

Here is an example setup for using the root.hint file (mine is in a
subdirectory off my chroot called /standard/


// Standard zones
//
zone "." {
        type hint;
        file "standard/root.hint";
};
                                                                                
zone "localhost" {
        type master;
        file "standard/localhost";
        allow-transfer { localhost; };
};
                                                                                
zone "127.in-addr.arpa" {
        type master;
        file "standard/loopback";
        allow-transfer { localhost; };
};
                                                                                
zone
"0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa"
{
        type master;
        file "standard/loopback6.arpa";
        allow-transfer { localhost; };
};
                                                                                
zone
"0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.int"
{
        type master;
        file "standard/loopback6.int";
        allow-transfer { localhost; };
};
                                                                                
zone "com" {
        type delegation-only;
};
                                                                                
zone "net" {
        type delegation-only;
};
                                                                                
                                                                                Good Luck - Jon Carnes


On Tue, 2005-11-01 at 11:31, Rick DeNatale wrote:
> I'm plagued by what looks like an intermittent problem with my nameserver setup.
> 
> I'm running bind9 as a cacheing name server, and to resolve local
> addresses on my LAN.
> 
> >From time to time, resolution of internet names seems to stop for a
> while.  Sometimes it's all external names, and sometimes it's only
> some.  For example, right now I can resolve www.google.com, but not
> en.wikipedia.org.
> 
> The bind configuration has a forward first directive, and a forwarders
> directive to forward to my netgear router which in turn forwards to
> the name servers it gets from my isp via dhcp. The router's local ip
> address is 192.168.0.11
> 
> Here's some recent attempts to figure out what's going on using dig.
> rick at frodo:~$ dig www.google.com
> 
> ; <<>> DiG 9.2.4 <<>> www.google.com
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49965
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 5, ADDITIONAL: 5
> 
> ;; QUESTION SECTION:
> ;www.google.com.                        IN      A
> 
> ;; ANSWER SECTION:
> www.google.com.         310     IN      CNAME   www.l.google.com.
> www.l.google.com.       270     IN      A       64.233.161.99
> www.l.google.com.       270     IN      A       64.233.161.104
> www.l.google.com.       270     IN      A       64.233.161.147
> 
> ;; AUTHORITY SECTION:
> l.google.com.           19999   IN      NS      e.l.google.com.
> l.google.com.           19999   IN      NS      a.l.google.com.
> l.google.com.           19999   IN      NS      b.l.google.com.
> l.google.com.           19999   IN      NS      c.l.google.com.
> l.google.com.           19999   IN      NS      d.l.google.com.
> 
> ;; ADDITIONAL SECTION:
> a.l.google.com.         158     IN      A       216.239.53.9
> b.l.google.com.         154     IN      A       64.233.179.9
> c.l.google.com.         159     IN      A       64.233.161.9
> d.l.google.com.         24178   IN      A       64.233.183.9
> e.l.google.com.         160     IN      A       66.102.11.9
> 
> ;; Query time: 72 msec
> ;; SERVER: 192.168.0.40#53(192.168.0.40)
> ;; WHEN: Tue Nov  1 11:14:38 2005
> ;; MSG SIZE  rcvd: 260
> 
> rick at frodo:~$ dig en.wikipedia.org
> 
> ; <<>> DiG 9.2.4 <<>> en.wikipedia.org
> ;; global options:  printcmd
> ;; connection timed out; no servers could be reached
> rick at frodo:~$ dig @192.168.0.11 en.wikipedia.org
> 
> ; <<>> DiG 9.2.4 <<>> @192.168.0.11 en.wikipedia.org
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2577
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 16, AUTHORITY: 3, ADDITIONAL: 3
> 
> ;; QUESTION SECTION:
> ;en.wikipedia.org.              IN      A
> 
> ;; ANSWER SECTION:
> en.wikipedia.org.       1288    IN      CNAME   rr.wikimedia.org.
> rr.wikimedia.org.       175     IN      CNAME   rr.pmtpa.wikimedia.org.
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.246
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.247
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.248
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.202
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.203
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.204
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.205
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.206
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.210
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.213
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.214
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.235
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.236
> rr.pmtpa.wikimedia.org. 1222    IN      A       207.142.131.245
> 
> ;; AUTHORITY SECTION:
> wikimedia.org.          72805   IN      NS      ns1.wikimedia.org.
> wikimedia.org.          72805   IN      NS      ns2.wikimedia.org.
> wikimedia.org.          72805   IN      NS      ns0.wikimedia.org.
> 
> ;; ADDITIONAL SECTION:
> ns0.wikimedia.org.      19250   IN      A       207.142.131.207
> ns1.wikimedia.org.      45396   IN      A       207.142.131.208
> ns2.wikimedia.org.      45396   IN      A       145.97.39.158
> 
> ;; Query time: 109 msec
> ;; SERVER: 192.168.0.11#53(192.168.0.11)
> ;; WHEN: Tue Nov  1 11:20:12 2005
> ;; MSG SIZE  rcvd: 410
> 
> rick at frodo:~$ dig www.google.com
> 
> ; <<>> DiG 9.2.4 <<>> www.google.com
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6779
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 5, ADDITIONAL: 5
> 
> ;; QUESTION SECTION:
> ;www.google.com.                        IN      A
> 
> ;; ANSWER SECTION:
> www.google.com.         822     IN      CNAME   www.l.google.com.
> www.l.google.com.       231     IN      A       64.233.161.99
> www.l.google.com.       231     IN      A       64.233.161.104
> www.l.google.com.       231     IN      A       64.233.161.147
> 
> ;; AUTHORITY SECTION:
> l.google.com.           19659   IN      NS      e.l.google.com.
> l.google.com.           19659   IN      NS      a.l.google.com.
> l.google.com.           19659   IN      NS      b.l.google.com.
> l.google.com.           19659   IN      NS      c.l.google.com.
> l.google.com.           19659   IN      NS      d.l.google.com.
> 
> ;; ADDITIONAL SECTION:
> a.l.google.com.         86247   IN      A       216.239.53.9
> b.l.google.com.         86248   IN      A       64.233.179.9
> c.l.google.com.         86248   IN      A       64.233.161.9
> d.l.google.com.         23838   IN      A       64.233.183.9
> e.l.google.com.         86248   IN      A       66.102.11.9
> 
> ;; Query time: 140 msec
> ;; SERVER: 192.168.0.40#53(192.168.0.40)
> ;; WHEN: Tue Nov  1 11:20:18 2005
> ;; MSG SIZE  rcvd: 260
> 
> 
> So I can get google resolved via my local nameserver, but I can only
> resolve en.wikipedia.org if I bypass the local nameserver and go
> directly to the netgear router.
> 
> As I said these problems seem to come and go.  Resolution of local
> names seems solid (they're all in a local subdomain
> local.denhaven2.com). Restarting bind doesn't seem to make a
> difference.
> 
> Any ideas?
> --
> Rick DeNatale
> 
> Visit the Project Mercury Wiki Site
> http://www.mercuryspacecraft.com/




More information about the TriLUG mailing list